CVE-2019-5543 : Security Advisory and Response
Learn about CVE-2019-5543 affecting VMware Horizon Client, Remote Console, and Workstation for Windows. Discover the impact, affected versions, and mitigation steps.
A privilege escalation vulnerability has been identified in VMware products for Windows, potentially allowing unauthorized users to execute commands as any user.
Understanding CVE-2019-5543
This CVE affects VMware Horizon Client, VMware Remote Console, and VMware Workstation for Windows.
What is CVE-2019-5543?
The vulnerability in VMware products for Windows allows users to exploit write permissions on the folder containing configuration files for the VMware USB arbitration service, leading to potential privilege escalation.
The Impact of CVE-2019-5543
The vulnerability could enable a local user on the system to execute commands as any user, compromising system security and integrity.
Technical Details of CVE-2019-5543
This section provides detailed technical information about the vulnerability.
Vulnerability Description
The folder holding configuration files for the VMware USB arbitration service in affected VMware products for Windows has write permissions for all users, creating a security risk.
Affected Systems and Versions
- VMware Horizon Client for Windows (5.x and prior before 5.3.0)
- VMware Remote Console for Windows (10.x before 11.0.0)
- VMware Workstation for Windows (15.x before 15.5.2)
Exploitation Mechanism
Unauthorized users with access to the system can potentially exploit this vulnerability to run commands as any user, leading to privilege escalation.
Mitigation and Prevention
Protect your systems from CVE-2019-5543 with the following steps:
Immediate Steps to Take
- Apply the necessary security updates provided by VMware.
- Restrict access to vulnerable systems to authorized users only.
- Monitor system logs for any suspicious activities.
Long-Term Security Practices
- Regularly update and patch VMware products to mitigate security risks.
- Implement least privilege access to limit user capabilities.
- Conduct security audits and assessments periodically.
Patching and Updates
Ensure that you install the latest patches and updates released by VMware to address the vulnerability.